Shuge Unlimited
Shuge Unlimited
Mar 13, 2026 · Operations

OpenClaw 3.11 Upgrade: Patch Critical WebSocket Hijack – 3 Methods & 4 Checks

OpenClaw 3.11 addresses a high‑severity cross‑site WebSocket hijack vulnerability (CVE GHSA‑5wcw‑8jjv‑m286) and adds several new features, offering three upgrade paths—install script, global npm/pnpm install, or source‑code install—and four post‑upgrade verification steps to ensure a safe and smooth migration.

OpenClawSecurityWebSocket hijack
0 likes · 11 min read
OpenClaw 3.11 Upgrade: Patch Critical WebSocket Hijack – 3 Methods & 4 Checks